Atlassian Jira Align Improper Authorization Vulnerability Allowing Privilege Escalation

A vulnerability exists in Jira Align versions 11.14.0, 11.14.1, 11.15.0, 11.15.1, and 11.16.0, related to improper authorization. This issue allows a low-privilege user to perform actions by including a state-related parameter from a user with sufficient privileges. The vulnerability could lead to unauthorized actions being executed by users who should not have the necessary rights.

Impact

Exploitation of this vulnerability could allow low-privilege users to perform actions that require higher privileges, potentially leading to unauthorized changes or access within the application.

Remediation

Users can upgrade to Jira Align version 11.16.1 to address this vulnerability.